Every CVE Search/ Get API key

CVE-2014-8124

OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly...

5.0 MediumFix available

OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records when using a db or memcached session engine, which allows remote attackers to cause a denial of service via a large number of requests to the login page.

Exploit likelihood

2.94%Up 1.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 5.0

OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records when using a db or memcached session engine, which allows remote attackers to cause a denial of service via a large number of requests to the login page.

Record
CVE-2014-8124
CVSS 2.0
5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Weakness
CWE-400
Updated
2026-11-02
CVE List No score

OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records when using a db or memcached session engine, which allows remote attackers to cause a denial of service via a large number of requests to the login page.

Record
CVE-2014-8124
Updated
2026-11-02
EUVDEUVD-2014-7968 No score

OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records when using a db or memcached session engine, which allows remote attackers to cause a denial of service via a large number of requests to the login page.

Record
EUVD-2014-7968
Updated
2026-11-03
GitHub AdvisoriesGHSA-q878-vxpg-6qx6 No score

OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly...

OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records when using a db or memcached session engine, which allows remote attackers to cause a denial of service via a large number of requests to the login page.

Record
GHSA-q878-vxpg-6qx6
Weakness
CWE-400
Updated
2026-11-02
OSV No score

OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records when using a db or memcached session engine, which allows remote attackers to cause a denial of service via a large number of requests to the login page.

Record
CVE-2014-8124
Updated
2026-11-02
OSVDEBIAN-CVE-2014-8124 No score

OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records when using a db or memcached session engine, which allows remote attackers to cause a denial of service via a large number of requests to the login page.

Record
DEBIAN-CVE-2014-8124
Updated
2026-11-02
OSVSUSE-RU-2015:0410-1 No score

Security update for openstack-dashboard

This update for openstack-dashboard fixes a cross-site scripting issue on the unordered_list filter. (bnc#891815, CVE-2014-3594)

Security Issues:

* CVE-2014-3475
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3475>
Record
SUSE-RU-2015:0410-1
Updated
2026-11-02
OSVUBUNTU-CVE-2014-8124 No score

OpenStack Dashboard (Horizon) before 2014.1.3 and 2014.2.x before 2014.2.1 does not properly handle session records when using a db or memcached session engine, which allows remote attackers to cause a denial of service via a large number of requests to the login page.

Record
UBUNTU-CVE-2014-8124
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
horizon
Debian:12
 before 2014.1.3-6
2014.1.3-6
horizon
Debian:13
 before 2014.1.3-6
2014.1.3-6
horizon
Debian:14
 before 2014.1.3-6
2014.1.3-6
openstack-dashboard
Red Hat:openstack:5::el7
 before 0:2014.1.4-1.el7ost
0:2014.1.4-1.el7ost
openstack-dashboard-theme
Red Hat:openstack:5::el7
 before 0:2014.1.4-1.el7ost
0:2014.1.4-1.el7ost
python-django-horizon
Red Hat:openstack:5::el7
 before 0:2014.1.4-1.el7ost
0:2014.1.4-1.el7ost
python-django-horizon-doc
Red Hat:openstack:5::el7
 before 0:2014.1.4-1.el7ost
0:2014.1.4-1.el7ost
python-django-openstack-auth
Red Hat:openstack:5::el7
 before 0:1.1.5-4.el7ost
0:1.1.5-4.el7ost
openstack-dashboard
Red Hat:openstack:5::el6
 before 0:2014.1.4-1.el6ost
0:2014.1.4-1.el6ost
openstack-dashboard-theme
Red Hat:openstack:5::el6
 before 0:2014.1.4-1.el6ost
0:2014.1.4-1.el6ost
Show 4 moreShow less
Affected packages
PackageAffectedFixed
python-django-horizon
Red Hat:openstack:5::el6
 before 0:2014.1.4-1.el6ost
0:2014.1.4-1.el6ost
python-django-horizon-doc
Red Hat:openstack:5::el6
 before 0:2014.1.4-1.el6ost
0:2014.1.4-1.el6ost
python-django-openstack-auth
Red Hat:openstack:5::el6
 before 0:1.1.5-4.el6ost
0:1.1.5-4.el6ost
horizon
Ubuntu:14.04:LTS
 before 1:2014.1.4-0ubuntu2, plus listed versions
1:2013.2~rc3-0ubuntu11:2013.2-0ubuntu11:2014.1~b1-0ubuntu11:2014.1~b2-0ubuntu11:2014.1~b2-0ubuntu2
Show 10 moreShow less
1:2014.1~b3-0ubuntu11:2014.1~b3-0ubuntu21:2014.1~rc1-0ubuntu11:2014.1~rc2-0ubuntu11:2014.1-0ubuntu11:2014.1.1-0ubuntu11:2014.1.2-0ubuntu11:2014.1.2-0ubuntu1.11:2014.1.3-0ubuntu11:2014.1.3-0ubuntu2
1:2014.1.4-0ubuntu2

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-8124 is a medium vulnerability (CVSS 5.0) in Openstack Horizon, published August 28, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.94%, the 87th percentile. Fixed in horizon 2014.1.3-6.

References

Show 29 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open